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SPECIFICATION 



FIELD OF THE INVENTION 



The present invention relates to remote installation of computer software and, in 
particular, to a mechanism for automatically, accurately, and remotely installing and updating 
computer software distributed over a computer network. 



The Internet is just the latest of a growing number of large computer networks in which a 
number of server computer systems provide services to countless client computer systems. Each 
of the server computer systems require maintenance as new software is made available or 
existing software is upgraded. 

Such maintenance typically involves a human computer engineer accessing each server 
individually and customizing software for each server. Requiring human access to each 
individual server effectively limits the number of servers that can be maintained and represents a 
relatively high cost for such maintenance. 

What is needed is a mechanism by which software installation and maintenance to 
various servers of a computer network can be more automated and, as a result, more error-free. 
Such a system would significantly reduce the cost in providing large numbers of such servers. 



In accordance with the present invention, computer software is installed in a selected one 
of a number of server computer systems using an installation template. The installation template 
includes placeholder data which represents server-specific information used to install the 
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computer software. The placeholder is included in program modules, configuration data files, 
and/or installation scripts. To install the computer software on the selected server computer, a 
master server retrieves server-specific information for the selected server, substitutes the 
retrieved server-specific data for the placeholder data to form server-specific installation data, 
5 and transports the server-specific installation data to the selected server for execution. 

The master server maintains a service and package interdependency database in which 
relationships between various types of software are recorded and associated with server-specific 
data. To initiate installation of a particular collection of software on a particular destination 
server computer, a network manager simply stores the requisite server-specific information and 
10 associates the requisite server-specific information with the collection of software. One or more 
g templates corresponding to the collection of software are then retrieved, placeholder data in those 
£ templates are replaced with server-specific data, and the resulting installation data is transported 
=p to the destination server computer. 

g The destination server computer periodically searches predetermined locations, e.g., a 

¥5 predetermined directory within the destination server computer, for installation data representing 

pending installations. To enhance security, the destination server computer determines that the 
rg installation data is owned by a previously authorized entity prior to carrying out the installation. 
! ^ The installation can include executing one or more installation scripts which in turn copy 

O program modules and/or configuration data files to locations within the destination server 
% computer which are specified in the installation scripts. As a result of the placeholder data 

substitution carried out by the master server, all configuration data files, program modules, and 
installation scripts are custom tailored to the selected destination server computer. 

Installing computer software in accordance with the present invention provides a 
tremendous benefit. In particular, a network manager can specify inter-relationships between 
25 various software packages and services once and can thereafter accurately and easily initiate 

proper installation of such software packages and services on multiple server computers. Such 
installation is initiated by simply specifying a relatively few number of server-specific pieces of 
information and associating that information with a software service. Since the server-specific 
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information is entered automatically, the chances for clerical error during such installation are 
greatly reduced. In addition, server-independent portions of the installation data are configured 
only once and chances for clerical errors in those portions are greatly reduced. As a result, effort 
required to install numerous services and packages throughout a multitude of server computers is 
significantly reduced while accuracy of such installations is significantly improved. 



BRIEF DESCRIPTION OF THE DRAWINGS 

Figure 1 is a block diagram of a software distribution and installation system in 
accordance witff the present invention. 

Figure ^is a block diagram of a package and service datastore of the system of Figure 1 . 

Figure 3^is a block diagram of the package/service interdependence database of Figure 2 
in accordance with the present invention. 

Figure 4^is a logic flow diagram of the user interface by which the user specifies changes 
to packages and services are maintained with the servers of Figure 1. 

Figure 5 is a logic flow diagram of the installation of a service and requisite packages in 
accordance with the present invention. 

Figure 6 is a logic flow diagram of the installation of a package and requisite packages in 
accordance with the present invention. . 

Figure 7 is a logic flow diagram of the installation of an individual service or package in 
accordance with' the present invention. 

Figure 8 is a logic flow diagram of the local installation by a server in accordance with 
the present invention. 

Figure 9is a block diagram illustrating the directory hierarchy by which multiple versions 
of services and packages can coexist in a single server in accordance with the present invention. 
Figure 10,is a logic flow diagram of retrieval of a service from a source code control 

system. 

Figure 1 1 is a screen view of the user interface by which a network manager can add, 
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delete, or edit a service record in the package/service interdependence database of Figure 2. 

Figure \2is a screen view of the user interface by which a network manager edits an 
existing service record in the package/service interdependence database of Figure 2. 

Figure 13 is a screen view of the user interface by which a network manager edits an 
5 existing service version record in the package/service interdependence database of Figure 2. 

Figure 14 is a screen view of the user interface by which a network manager edits an 
existing package record in the package/service interdependence database of Figure 2. 

Figure 15 is a screen view of the user interface by which a network m anager a network 
manager can adc£ delete, or edit a package record in the package/service interdependence 
1 0 database of Figure 2 . 

f=a Figure 16 is a screen view of the user interface by which a network manager edits an 

2 existing package'version record in the package/service interdependence database of Figure 2. 

i \ 3 
t=r - 

Figure 17 is a screen view of the user interface by which a network manager can add, 

in / 

q delete, or edit anlP address record in the package/service interdependence database of Figure 2. 

Figure 1 8^is a screen view of the user interface by which a network manager edits an 
b existing service in the package/service interdependence database of Figure 2. 

gi Figure 1 9 is a screen view of the user interface by which a network manager can add, 

J * delete, or edit a machine record in the package/service interdependence database of Figure 2. 
O Figure 20 is a screen view of the user interface by which a network manager edits an 

lb existing machine record in the package/service interdependence database of Figure 2. 

Figure 2Hs a screen view of the user interface by which a network manager commits or 
rolls back actions in the package/service interdependence database of Figure 2. 



25 DETAILED DESCRIPTION 

In accordance with the present invention, a human engineer using a computer system 102 
can maintain numerous software services and packages installed on a number of servers 104A-C 
(Figure 1) through a single master server 108 and a computer network 110. As described more 
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completely below, each software service and package is represented in a package and service 
template datastore 120 in templatized form. 

As used herein, services and packages are types of computer software, i.e., computer 
instructions and data which collectively define one or more tasks to be carried out by one or more 
5 computers. A service is generally a collection of computer software which, when executed, 

serves requests for data and/or processing through a computer network such as computer network 
110 — i.e., remote requests. A package is generally a collection of computer software which, 
when executed, serves local requests for data and/or processing — i.e., requests from other 
computer processes executing in the same computer. Within any of servers 104A-C, a service 
10 can depend upon, i.e., submit requests to, one or more packages within the same server. 
^ Similarly, a package within any of servers 104A-C can submit requests to, and therefore depend 
*G upon, one or more other packages within the same server. The distinction herein between 

y s 

£ services and packages is primarily conceptual and somewhat arbitrary and, in other 

S £= 

2 : : 

« embodiments, services and packages can be treated identically. In this illustrative embodiment, 

services and packages also differ in that multiple versions of a package can be installed in a 
s single one of servers 104A-C while only a single version of any service is permitted to be 

JSJ installed in any server. 

f« Within package and service template datastore 120, each service and package is 

Q represented in a templatized form. Specifically, a template 202 (Figure 2) represents a complete 
^t) installation of a service or a package with any and all server-specific information represented by 
placeholder data. In this illustrative embodiment, servers 104A-C are Internet servers running a 
Unix-type operating system and the server-specific information includes an Internet protocol (IP) 
address and a machine host name of the server. Such information is represented in template 202 
by "%%WEB_IP%%" or "%%MUSIC_IP%%" for IP addresses and 
25 "%%MACHINE_NAME%%" for machine host names. Other placeholder data can be used for 
other installation-specific data within template 202. The following table identifies placeholder 
data and the information represented thereby. 
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Table A 




Placeholder Data 


Information Represented 




%%SERVICE DOMAIN NAME%% 


A luilj ^UdllllCU UUIIlalll IlalllC Ul a oCrVlCC ^C.g., 

www.liquidmusicnetwork.com). 




%%MACHINE DOMAIN NAME%% 


r\ uuiiiaiil lialixc Ul a opcClllL dCiVCi LUIIipUlcr ^C.g. 5 

liquidaudio.com). 


5 


%%MACHINE_NAME%% 


A machine name of a server without a domain (e.g., 


lU 


%%MUSIC_IP%% 


An IP address used for a particular type of service 
vc.g., iu oil coin aiiu/or uowmodu music — ooin 
HTTP and non-HTTP). 


ih 


%%Dackaee-name ROOT%% 

t 


An 5\ nQA 1 1 ltf^ ncitn tr\ a \/^r*ci r\n_i r\r\f*Y\c*ri/Ac*r\t /~1 \ rc*r>+r\y~\ i 
Ji-ii auouiuiw jjciui i\j a VCIMUli IIIUCUCIIUCIII UIlCL/lUry 

for the package identified by package-name. 


i 5 
e 3 


%%Dackaee-name VERSION%% 


n VvlMUll ilUlllUCI 1UI U1C paLKclgt lucnuiicu uy 

package-name. 


Q 

s 

1*5 


%%pflc*age-/7awe_VR00T%% 


An absolute path to a version-dependent directory 
for the package identified bv vacka&e-name 


©) 


%%SERVICE_NAME%% 


A name of a service. 




%%SERVICE_ROOT%% 


An absolute path to a version-independent directory 
for the service. 




%%SERVICE_VERSION%% 


A version number of the service. 




%% <: 5FRVTrF VROf>T%% 


/\n aosoiuie pain 10 a version-dependent directory 
for the service. 




%%WEB_IP%% 


An IP address used for connections through the 
World Wide Web. 


15 


Template 202 includes one or more configuration data files 204, one or more installation 
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scripts 206, and one or more program modules 208. Configuration data files 204 include 
configuration data which influences the behavior of program modules 208 during execution and 
can include server-specific information represented by placeholder data as described above. 
Installation scripts 206 include commands to be executed by a server to effect installation of the 
5 service or package represented by template 202. Installation scripts 206 can similarly include 
server-specific information represented by placeholder data as described above. Program 
modules 208 contain computer instructions and data which specify actions to be taken by a 
computer to thereby provide the service or package represented by template 202. Installation of a 
service or package from template 202 is described more completely below. 
10 Package and service template datastore 120 also includes a package/service 

n interdependency database 210 which is shown in greater detail in Figure 3. A service is 
jO represented in package/service interdependency database 210 by a service record within service 
^ table 376, and a package is represented by a package record within package table 370. Service 
O records of service table 376 include a service identifier 378 which uniquely identifies the service 
t5 represented by the service record, a name 380 of the service, and a domain name 382 by which 
a_ the service can be requested through computer network 110 (Figure 1), which is the Internet in 
this illustrative example. Package records of package table 370 (Figure 3) include a package 
identifier 372, which uniquely identifies the package represented by the package record, and a 
name 374 of the package. 
20 Figure 1 1 shows a display 1 100 of a web browser, executing in computer 102 for 

example, which provides a user interface by which a network manager modifies contents of 
service table 376 (Figure 3). Display 1 100 shows an HTML (hypertext markup language) form 
by which the network manager can specify desired changes to service table 376. Web browsers 
and HTML forms are known and are not described herein. 
25 Display 1 100 (Figure 1 1) includes a list 1 102 of services currently represented in service 

table 376 (Figure 3). The items listed in list 1 102 are the service names represented by name 380 
of individual records in service table 376. The network manager can add a new service to service 
table 376 by entering the name (for storage as name 380) of the service in text box 1 108, entering 



SEE S 
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the corresponding domain name (for storage as domain name 382) in text box 1 1 10, and pressing 
button 1112 using conventional user interface techniques including physical manipulation of user 
input devices. As described more completely below, actions which effect addition of the new 
service are stored in an action list and can be rolled back. The rolling back of actions on the 
5 tables of package/service interdependency database 210 is described below in conjunction with 
Figure 21. Similarly, all modifications to package/service interdependency database 210 
described below in conjunction with Figures 1 1-20 are represented by actions stored in action list 
384 (Figure 3) such that all modifications to package/service interdependency database 210 can 
be rolled back prior to commitment by the network manager. 
10 The network manager removes an existing service from service table 376 by selecting the 

m name of the service from list 1 102 and pushing button 1 106 using conventional user interface 
*3 techniques. Similarly, the network manager edits an existing service within service table 376 by 

selecting the name of the service from list 1 102 and pushing button 1 104. 
q In response to selecting a service and pushing button 1 104, master server 1 08 sends an 

8j5 HTML form through computer network 1 10 to computer 102 such that display 1200 (Figure 12) 
3 is presented to the network manager. Though the form of display 1200, the network manager can 

g modify the name of the service in text box 1202 and the domain name of the service in text box 
|^ 1204. Upon pushing button 1206, the form data of display 1200 is sent to master server 108 

i : a 

Q (Figure 1) and, in response thereto, master server 108 adds to the list of pending actions, an 
56 action in which the selected service record is modified such that name 380 (Figure 3) stores the 
name as modified in text box 1202 (Figure 12) and domain name 382 stores the domain name as 
modified in text box 1204. 

Display 1400 (Figure 14) includes a list 1402 of names of packages (from name 370) 
currently represented in package table 370 (Figure 3). The network manager can add a new 
25 package to package table 370 by entering the name of the package in text box 1408 (Figure 14) 
and pressing button 1410. As a result, the form data of display 1400 is sent through computer 
network 1 10 (Figure 1) to master server 108 and master server 108 adds to the list of pending 
actions an action to add a package record to package table 370 (Figure 3) whose name 374 is the 
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name specified in text box 1408 (Figure 14). 

The network manager removes an existing package from package table 370 (Figure 3) by 
selecting the name of the package from list 1402 (Figure 14) and pushing button 1406. The 
result is an action to delete the specified package record appended to the list of pending actions. 
5 Similarly, the network manager edits an existing package within package table 370 (Figure 3) by 
selecting the name of the package from list 1402 (Figure 14) and pushing button 1404. In editing 
a package, the network manager can modify the name of the package, and the name as modified 
is represented in name 374 (Figure 3) by an action appended to the list of pending actions. 

Multiple versions of services and packages are supported in the system described herein, 

10 and multiple versions of packages can coexist in the system described herein. Accordingly, 

Q service version records of a service version table 346 (Figure 3) represent specific versions of a 

^ service, e.g., the service represented within service table 376 as shown in Figure 3. A service 

ys 

£ version record includes a service version identifier 348 which uniquely identifies the service 

yi 

p version represented by the service version record, a service identifier 350 which identifies the 

B service to which the service version record corresponds, a version 352, and a remark 354. Since 

2^ multiple versions of a service can exist within package/service interdependency database 2 1 0, 

1 1 i 

gj other service version records can also identify the same service record, through service identifier 

!jj 378, as the service to which the other service version records correspond. 

O Display 1200 (Figure 12) includes form components to allow addition, deletion, and 

a 

20 modification of service versions of service version table 346. In particular, the network manager 
removes a service version by selecting the version from a list 1208 (Figure 12) and pushing 
button 1212. The items of list 1208 are values stored in version 352 (Figure 3) of service version 
table 346. The network manager adds a new version to service version table 346 by entering the 
version (version 352) in text box 1214 (Figure 12), entering a comment (remark 354) in text box 

25 1216, and pushing button 1218. The associated service (service identifier 350) is the service 
represented in text boxes 1202-1204. The network manager edits a service version of service 
version table 346 by selecting the version from list 1208 and pushing button 1210. In response to 
pushing button 1210, master server 108 (Figure 1) presents the HTML form of display 1300 
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(Figure 13) to the network manager. The form of display 1300 is described below. 

Package version records of a package version table 336 (Figure 3) represent specific 
versions of a package. A package version record includes a package version identifier 338 which 
uniquely identifies the package version represented by the package version record, a package 
5 identifier 340 which identifies the package to which the package version record corresponds, a 
version 342, and a remark 344. Since multiple versions of a package can exist simultaneously, 
other package version records can also identify the same package record, through package 
identifier 372, as the package to which the other package version records correspond. 

Display 1500 (Figure 15) represents a form by which the network manager can edit an 
10 existing package and add, delete, and/or modify versions of a package. The network manager 
p can add to the list of pending actions an action changing the name of the package as represented 
S by name 374 (Figure 3) by modifying the name represented in text box 1 502 (Figure 1 5) and 
J pushing button 1 504. 

g Versions of the package whose name appears in text box 1 502, i.e., the subject package in 

45 the context of Figure 15, are listed in list 1506. The items of list 1506 are version names as 

= represented by version 352 (Figure 3) for each version of the subject package stored in 

P 

gj package/service interdependency database 210. To add a new version of the subject package, the 
I « network manager enters the name of the new version in text box 1512 (Figure 1 5) and can enter 
□ any associated comments (to be stored as remark 344) in text box 1514 and pushes button 1516. 
2t) To delete a version of the subject package, the network manager selects a version name from list 
1506 (Figure 15) and pushes button 1510. To edit a version of the subject package, the network 
manager selects a version name from list 1506 (Figure 15) and pushes button 1508. 

In response to pushing of button 1508, master server 108 (Figure 1) sends data 
representing the form of display 1600 (Figure 16) through computer network 1 10 to computer 
25 102 for display to the network manager. The package name and version are represented in 

combination in text box 1602 and the network manager can modify the name and version of the 
package in text box 1602 using conventional user interface techniques. Remark 344 (Figure 3) is 
represented in text box 1604 and can be modified there by the network manager using 
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conventional user interface techniques. 

As described above, a service can depend upon one or more packages. Such dependency 
is represented in respective service-package records of service-package table 310. A service- 
package record includes a service-package identifier 312 which uniquely identifies the service- 
5 package dependency represented by the service-package record. The service-package record also 
includes a service version identifier 314 and a package version identifier 316. Service version 
identifier 3 14 identifies the service — and version of the service — which is dependent upon a 
package, and package version identifier 316 identifies the package — and version of the package 
— upon which the service is dependent. 
1 0 Dependency of a service upon a package, e.g., version 5.0a25 of the "1ms" package, is 

_^ reflected in display 1600 (Figure 16). List 1610 includes names and versions of various services 
jS represented in package/service interdependency database 210 (Figure 3). Those services which 
depend upon the subject package version, i.e., the package version represented in text box 1602 
tl (Figure 16), are shown in a highlighted state. For example, version 1 .4 of the merchant service is 
fc§ shown to depend upon version 5.0a25 of the 1ms package. Accordingly, package/service 
5 interdependency database 2 1 0 (Figure 3) includes, in service-package table 3 1 0, a record 

~ identifying both version 1.4 of the merchant service in service version table 346 and version 
?U 5.0a25 of the 1ms package in package version table 336. The network manager can delete such a 
p dependency by clicking on "merchant 1.4" in list 1610 (Figure 16) and pushing button 1612. 
5t) Similarly, the network manager can create a similar dependency between version 1 .5 of the muze 
service and version 5.0a25 of the 1ms package by clicking on "muze 1.5" in list 1610 and pushing 
button 1612. 

Similarly, a package can depend upon one or more other packages. Such dependency is 
represented in respective package dependency records of package dependency table 302 (Figure 
25 3). A package dependency record includes a package dependency identifier 304 which uniquely 
identifies the inter-package dependency represented by the package dependency record. A 
package dependency record also includes package version identifiers 306 and 308. Package 
version identifier 306 identifies the package — and version of the package — which is dependent 
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upon a package, i.e., the referenced package, and package version identifier 308 identifies the 
referenced package — and version of the referenced package — upon which the former package 
is dependent. 

Packages on which version 5.0a25 of the 1ms package can depend are listed by package 
5 name and version in list 1606 (Figure 16). Packages on which version 5.0a25 of the 1ms package 
does depend are shown in a highlighted state — display 1600 shows no such dependencies. The 
network manager can add and delete such dependencies using list 1606 and button 1608 in the 
manner described above with respect to list 1610 and button 1612. 

As described above, server-specific information includes an IP address for the server and 
1 0 a host name or similar machine identifier of the server. Such information is represented by IP 
^ records of IP table 356 (Figure 3) and machine records of machine table 362, respectively. In 
particular, an IP record includes an IP identifier 358 which uniquely identifies the IP record and 

a™ : 

> an IP address 360. A machine record includes a machine identifier 364 which uniquely identifies 
rJ the machine record, a name 366 and a host identifier 368. Host identifier 368 stores a hardware 
NS identifier associated with a particular one of servers 104A-C (Figure 1) and, in this illustrative 
g " embodiment, is a Sun host identifier assigned by the manufacturer of the one of servers 104A-C, 
g namely, Sun Microsystems Inc. of Palo Alto, California. Name 366 (Figure 3) stores data by 
RJ which a particular one of servers 104A-G (Figure 1) is identified and is generally selected in a 
□ manner to be more memorable to human network managers in determining which of servers 
2© 104A-C should provide which services. 

Display 1700 (Figure 17) shows a from by which the network manager adds, deletes, and 
modifies IP records of IP table 356 (Figure 3). IP addresses (e.g., address 360) represented in 
package/service interdependency database 210 are listed in list 1 702 (Figure 1 7). To add a new 
IP address, the network manager enters the new IP address into text box 1708 and pushes button 
25 1 7 1 0. To delete an IP address, the network manager selects the address from list 1 702 and 
pushes button 1706. To edit an IP address, the network manager selects the address from list 
1 7 1 0 and pushes button 1 704. 

In response to pushing button 1704, display 1800 (Figure 18) is presented to the network 
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manager. The selected IP address is represented in text box 1802 and the network manager can 
modify the IP address there. The network manager presses button 1804 to effect the changes to 
the selected IP address. 

Display 1900 (Figure 19) shows a form by which the network manager can add, delete, 
5 and modify machine records of machine table 362 (Figure 3). Machines (e.g., machine name 
366) represented in package/service interdependency database 210 are listed in list 1902 (Figure 
19). To add a new machine, the network manager enters the new machine name into text box 
1908, enters an associated host identifier (to be stored as host identifier 368) in text box 1910, 
and pushes button 1912. To delete a machine, the network manager selects the machine from list 

10 1902 and pushes button 1906. To edit a machine, the network manager selects the machine from 

^ list 1 902 and pushes button 1 904. 

J In response to pushing button 1 904, display 2000 (Figure 20) is presented to the network 

jp manager. The selected machine is represented in text box 2002 and the host identifier of the 
£j selected machine is represented in text box 2004. The network manager can modify the machine 
H name and host identifier in text boxes 2002 and 2004, respectively. The network manager 
s presses button 2006 to effect the changes to the selected machine. 

gj IP addresses and machine names are associated with one another through IP-machine 

- f y records of IP-machine table 328 (Figure 3). An IP-machine record includes an IP-machine 

p identifier 330 which uniquely identifies the IP-machine record, an IP identifier 332, and a 

0 

20 machine identifier 334. IP identifier 332 identifies the IP record of IP table 356 as representing 
the IP address with which the machine is associated, and machine identifier 334 identifies 
machine record of machine table 362 as representing the machine with which the IP address is 
associated. 

Associations between machines and IP addresses can be altered by the network manager 
25 in two ways: one through display 1800 (Figure 18) and another through display 2000 (Figure 20). 

Display 1800 (Figure 18) includes a list 1806 of names of machines represented in 
machine table 362 (Figure 3). Those machines which are associated with the IP address 
represented in text box 1802 (Figure 18) are shown in list 1806 in a highlighted state. The 



— 14 — 



Patent Application Attorney Docket P-2 1 38D 1 

network manager toggles a machine's association with the IP address represented in text box 
1 802 by selecting the machine's name in list 1 806 and pressing button 1 808. 

In display 2000 (Figure 20), list 2008 represents IP address represented in IP table 356 
(Figure 3). Those IP address which are associated with the machine represented in text box 2002 
(Figure 20) are shown in list 2008 in a highlighted stated. The network manager toggles an IP 
address's association with the machine represented in text box 2002 by selecting the IP address 
in list 2008 and pressing button 20 1 0. 

As described more completely below, association of a service with all server-specific 
information necessary for installation, e.g., an IP address and machine name in this illustrative 
embodiment, causes installation of the service. Such an association is represented by a service-IP 
record of service-IP table 318 (Figure 3). A service-IP record includes a service-IP identifier 320 
which uniquely identifies the service-IP record, a service version identifier 322, an IP identifier 
322, and an IP type 326. Service version identifier 322 identifies a service version record of 
service version table 346 as representing the associated service version, and IP identifier 322 
identifies an IP record of IP table 356 as representing the associated IP address. The requisite 
server-specific information is only present, in this illustrative embodiment, if the associated IP 
address is also associated with a machine name as represented within IP-machine table 328. IP 
type 326 stores data representing a type of IP address. IP type 326 allows multiple IP addresses 
to be assigned to a single one of servers 104A-C (Figure 1) for different purposes and to be 
distinguished from one another according to the purpose identified as a type of IP. In this 
illustrative embodiment, a single server can have an IP address for World Wide Web services, 
such as serving HTTP requests, and can have a second IP address for music services, such as 
delivering data representing sample music or purchased music. Thus, in this illustrative 
embodiment, there are two types of IP addresses that can be assigned to a single server, namely, 
web IP addresses and music IP addresses. 

The form of display 1800 (Figure 18) allows the network manager to define associations 
between IP addresses and versions of services. In particular, display 1800 includes a list 1810 of 
versions of services represented in service version table 346 (Figure 3). Those service versions 
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which are associated with the IP address represented in text box 1802 (Figure 18) are shown in 
list 1810 in a highlighted state. The network manager toggles a service version's association 
with the IP address represented in text box 1 802 by selecting the service's name and version in 
list 1810 and pressing button 1812. 

Logic flow diagram 400 (Figure 4) illustrates the user interface by which a network 
manager effects changes in package/service interdependency database 210 (Figure 2). In step 
402 (Figure 4), the network manager is authenticated. Authentication can be accomplished 
through any currently used authentication mechanisms including, for example, requiring the 
network manager to supply user identification data and an associated password. 

In step 404 (Figure 4), the network manager specifies changes to service/package 
interdependency database 210 (Figures 2 and 3). In this illustrative embodiment, the network 
manager, through computer system 102 (Figure 1) and computer network 1 10, accesses a user 
interface implemented by master server 108. The user interface is implemented through the 
HTML forms which are described above with respect to Figures 1 1-20 and through which the 
network manager specifies a number of actions. 

In database management, transactions involving a database are used to minimize data 
inconsistencies for others accessing the database during data writing. A transaction is a 
collection of one or more data access operations which are to be executed as a unit. Such allows 
the network manager to work over a period of time to configure a group of inter-related data 
access operations, perform the operations in a relatively short period of time, and roll back the 
changes if necessary. Implementation of transactions through HTML forms is particularly 
difficult since the nature of HTML form interaction allows termination of such interaction at any 
time. In particular, an HTML form is presented as any other web page but allows the user to 
submit data in response to the form. Once such data is submitted, the user is generally free to 
terminate interaction and to browser other web pages. Thus, HTML forms generally do not rely 
upon prolonged interaction with a particular user. 

Part of the difficulty in implementing database transactions is that changes to a database 
are cumulative. For example, a network manager can add a new service and then associate that 
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service with one or more packages. However, to represent such associations in service-package 
table 310, for example, would require that a service version identifier 348 had already been 
created. While creation of the service version record within service version table 346 would 
create such an identifier, such creation should be executed with the action creating the 
association between the service and the package as parts of a single transaction. 

To implement database transactions using HTML forms, service/package 
interdependency database 210 (Figure 3) represents uncommitted actions in an action table 384. 
When the network manager specifies an action to be performed on service/package 
interdependency database 210, e.g., by pushing any of the buttons of Figures 1 1-20, the action is 
performed and is represented by an action record stored in action table 384 (Figure 3). Action 
records of action table 384 provide a mechanism by which actions can be rolled back and provide 
an indication whether actions have been committed. As described below, actions are effectively 
limited to master server 108 (Figure 1), i.e., have no effect on servers 104AtC, until such actions 
are committed. However, immediate execution of the action allows a subsequent action to 
specify data from a previously executed but uncommitted action. 

For example, adding a new package as described above with respect to Figure 14 has an 
immediate effect such that the new package is listed subsequently in display 1300 (Figure 13). 
Accordingly, the network manager is able to specify an association between the newly added 
package and a service in the manner described above with respect to Figure 13. In particular, list 
1302 is created by reading all version of all packages from package version list 336 which 
includes the recently added new package. 

The newly executed action has no effect outside master server 108 because no package or 
service is deployed if the package or service relied upon an uncommitted action and uncommitted 
actions are eventually undone if not committed. 

An action record of action table 384 includes an action identifier 386 which uniquely 
identifies the action represented by the action record. In addition, an action record includes a 
type 388, a description 390, an undo command 392, an affected table 394, a key identifier 396, 
and a committed flag 398. Type 388 specifies the type of action and can represent an insertion, a 
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deletion, or a modification of a record of service/package interdependency database 210. 
Description 390 stores data summarizing the action to a human network manager. Description 
390 is intended to provide a meaningful summary of the action such that a human network 
manager can evaluate whether the action should be performed or rolled back. Undo command 
5 392 is a database access command whose performance effectively reverses the action represented 
by the action record. Actions are rolled back by execution of the respective undo commands 392 
of the rolled-back actions. Affected table 394 specifies the table affected by the action. For 
example, if the action record represents a modification of an IP address, affected table 394 
specifies IP table 356 as the table within which the action is to be performed. Key identifier 396 
1 0 specifies the specific record within the table to be affected. Continuing in the example of 
^ modification of an IP address, key identifier 396 specifies the IP identifier, e.g., IP identifier 358, 
@ of the particular IP record to modify. Committed flag 398 indicates whether the action 
jg represented by the action record has been committed. 

tl s Through interaction between the network manager and master server 1 08 (Figure 1 ) 

t§ through computer system 102 and computer network 1 10, actions that are performed at the 
s request of the network manager are added to the current list until the network manager believes 

jkes 

that the current list of actions will cumulatively have the desired effect on service/package 
pi interdependency database 2 1 0. The network manager clicks on tab 2 1 02 to request display 2 1 00 
p (Figure 21). 

26 Display 2100 includes a list of radio buttons 2104-2108. Radio buttons are a known user 

interface mechanism. Briefly, the network manager can select only one of radio buttons 2104- 
2108; selection of any of radio buttons 2104-2108 automatically de-selects all others. The 
network manager selects one of radio buttons 2104-2108 and pushes button 2110. The selected 
radio button identifies the last pending action of action table 384 to be committed. All pending 

25 actions submitted earlier than the selected pending action are also committed. All pending 

actions subsequent to the selected pending action are rolled back. If the network manager selects 
radio button 2104, no pending actions are committed and all pending actions are rolled back. 
Pressing of button 21 10 is represented as step 406 (Figure 4). 
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In response to pushing of button 21 10 (Figure 21) by the network manager, master server 
108 (Figure 1) sets committed flag 398 (Figure 3) of all committed action records according to 
the selected radio button of display 2100 (Figure 21). Actually performing the actions of the 
current list can take several minutes, and requiring the network manager to await 
5 acknowledgment that the actions were performed would be inconvenient for the network 
manager. Accordingly, master server 108 sends acknowledgment after merely marking the 
action records as committed, i.e., after merely setting committed flag 398, thereby providing 
feedback to the network manager in step 408 (Figure 4) much more quickly. Typically, the 
actions of the list will already have been performed within package/service interdependency 
10 database 210 and any rolling back of actions can be performed asynchronously with respect to 
^ feedback provided to the network manager in response to pushing button 2110 (Figure 21). In 

J3 one embodiment, rolling back of actions is performed synchronously with respect to feedback 

rn 

provided to the network manager in response to pushing button 2110. 

As described above, the network manager can specify that one or more pending actions 

■s=r 

#5 are to be rolled back. To roll back those actions, master server 108 performs the undo 

e commands, e.g., undo command 392, of those respective actions of the current list to remove the 

g( associated action records from action table 384. After step 408 (Figure 4), processing according 

to logic flow diagram 400 completes. 
□ A number of conditions cause master server 108 (Figure 1) to initiate installation of one 

"20 or more services and/or packages. A service is ready for installation when the service is 

associated with all server-specific information necessary for an installation. In this illustrative 
embodiment, such server-specific information includes an IP address and a machine name. A 
package is ready for installation if a service or another package which depends upon the package 
is ready for installation. 

25 Commitment of the following actions can initiate installation of a service or a package: 

(a) an action which inserts an IP-machine record into IP-machine table 328 
and (i) the inserted IP-machine record associates a machine record of machine 
table 362 with an IP record of IP table 356 and (ii) the IP record is in turn 
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associated with a service version record of service version table 346 by a service- 
IP record of service IP table 318; 

(b) an action which inserts a service-IP record into service-IP table 318 
and (i) the inserted service-IP record associates a service with an IP record and (ii) 

5 the IP record is in turn association with a machine record by a machine-IP record 

in machine-IP table 328; 

(c) an action which, inserts a service-package record in service-package 
table 3 10 and (i) the service is associated with an IP through service-IP table 3 1 8 
and (ii) the IP is associated with a machine through IP-machine table 328; and 

10 (d) an action which inserts a package dependency record into package 

^ dependency table 302 and (i) the inserted package dependency record associates, 

tff directly or indirectly through other package dependency records, a package with 

y h 

J! another package and (ii) the other package is associated with a service through 

l n 

jj{ service-package table 310 and (iii) the service is associated with an IP through 

service-IP table 3 1 8 and (iv) the IP is associated with a machine through IP- 
5 machine table 3 2 8 . 

^ It should be noted that, in this illustrative embodiment, commitment of actions (a)-(d) is 

RJ what can cause installation and not performance of actions (a)-(d). As described briefly above, 
□ uncommitted actions are limited in their effect to master server 108 and do not effect servers 
% 104A-C. 

Commitment of actions (a) and (b) cause installation of the service and all packages on 
which the service depends, directly or indirectly, as shown by logic flow diagram 500 (Figure 5). 
Commitment of actions (c) and (d) cause installation of the requisite package and all packages, 
on which the requisite package depends, directly or indirectly, as shown by logic flow diagram 
25 510 (Figure 6) which is described below. 

Logic flow diagram 500 (Figure 5) illustrates installation of a service to a particular one 
of servers 104A-C (Figure 1). In the context of logic flow diagram 500 (Figure 5), the service 
being installed is referred to as the subject service and the particular one of servers 104A-C to 



— 20 — 




Patent Application Attorney Docket P-2138D1 

which the subject service is being installed is referred to as the subject server. In step 502 
(Figure 5), master server 108 (Figure 1) retrieves the service version record of service version 
table 346 (Figure 3) which represents the service to be installed and the machine and IP records 
associated with the service. In step 504 (Figure 5), master server 108 (Figure 1) bundles the 
5 service to the one of servers 104A-C which is associated with the service in a manner described 
more completely below in conjunction with logic flow diagram 700 (Figure 7). As used herein, 
"bundling" refers to collection and preparation of data and software for transport to the subject 
server. Initially, the bundle is empty. Bundling of the subject service in the manner described 
below adds data and software representing the service to the bundle for ultimate transport to the 
10 subject server in step 514 (Figure 5) below. 

^ In step 506, master server 108 (Figure 1) finds all packages on which the subject service 

-5 depends. Master server 108 finds such packages by searching service-package table 310 (Figure 
jf 3) for all records whose service version identifiers 314 identify the subject service. Package 
z} version identifiers 3 16 of such records identify packages on which the subject service depends. 
ft§ Loop step 508 (Figure 5) and next step 512 define a loop in which each of the packages is 

b processed according to step 510. During each iteration of the loop of steps 508-512, the package 

gj processed according to step 510 is referred to as the subject package. Once all packages on 

Fy which the subject service depend have been processed according to the loop of steps 508-512, 

W 

□ processing transfers to step 514 which is described below. 

r 20 Each package on which the subject service depends is therefore processed according to 

step 510. In step 510, master server 108 (Figure 1) bundles the subject package and all packages 
on which the subject package depends for transport to the subject server. Step 510 is shown in 
greater detail as logic flow diagram 510 (Figure 6). 

In step 602 (Figure 6), master server 108 (Figure 1) retrieves the package version record 

25 of package version table 336 (Figure 3) which represents the subject package and the machine 
and IP records associated with the subject package, i.e., the same machine and IP records for the 
subject service. In step 604 (Figure 6), master server 108 (Figure 1) bundles the subject package 
for transport to the subject server in a manner described more completely below in conjunction 
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with logic flow diagram 700 (Figure 7). 

In step 606 (Figure 5), master server 108 (Figure 1) finds all packages on which the 
subject package depends. Master server 108 finds such packages by searching package 
dependency table 302 for all records whose package version identifiers 306 identify the subject 
5 package. Referenced package version identifiers 308 of such records identify packages on which 
the subject package depends. 

Loop step 608 (Figure 6) and next step 612 define a loop in which each of the packages is 
processed according to step 510. Step 5 10 is performed recursively. As described above, master 
server 108 (Figure 1) bundles each package, and all packages on which the package depends, for 
1 0 transport to the subject server in step 5 1 0. Once all packages on which the subject package 

depends have been processed according to the loop of steps 608-612, processing according to 
yy logic flow diagram 5 1 0, and therefore step 5 1 0 (Figure 5), completes. 

jjz Once the subject service and all packages on which the service depends are bundled, the 

^ contents of the bundle is transported to the subject server in step 514. Master server 108 (Figure 
H 1) transports the contents of the bundle through computer network 1 10 to the subject one of 
s " servers 104A-C, in particular, to a predetermined location within the subject server such as a 
jjj predetermined directory within the subject server, e.g., "/tap." In this illustrative embodiment, 
[1J master server 108 transports the contents of the bundle using the known "scp" utility. After step 

UJ 

□ 514 (Figure 5), processing according to logic flow diagram 500 completes. 

26 In this illustrative embodiment, the bundle is a script, execution of which causes the 

contents of the bundle to be transported to the subject server. In this embodiment, step 504 
includes writing an "install-service-to-machine" command to the script, and step 604 (Figure 6) 
includes writing an "install-package-to-machine" command to the script. Upon completion of 
logic flow diagrams 500 and 510, master server 108 (Figure 1) writes an end-of-script marker, 

25 e.g., "#EOF," to the script such that another process within master server 108 which is 

responsible for executing the script will refrain from doing so until the script is complete. 

In this illustrative embodiment, the script is executed with the highest available • 
privileges, e.g., as "root" on a UNIX operating system of master server 108. Such allows 
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execution of the script to perform tasks only "root" can perform such as assigning the owner of 
data files. Accordingly, a few precautions are taken to avoid unauthorized cracking and 
interference with the installation process. First, the script is executed only if the script is owned 
by an entity which is previously designated as authorized to create installation scripts, e.g., the 
5 web server process in this illustrative embodiment. Second, the script is not executed in the 
conventional manner. Instead, the script is read command-by-command and each command is 
executed only if the command is either the "install-service-to-machine" command or the "install- 
package-to-machine" command. Accordingly, other commands which might be placed in the 
script by a skilled but unauthorized cracker are not executed with such high privileges. In an 
10 alternative embodiment, the script includes an encrypted signature, e.g., encrypted according to 
_ the known MD5 encryption algorithm or similar encryption algorithm, and general purpose 

commands other than the "install-service-to-machine" and "install-package-to-machine" 
i commands are permitted. 

g While the script is executed by "root" in this illustrative embodiment, the transport 

B through computer network 1 10 by the "scp" utility is performed under a less privileged authority. 

g " Allowing a highly privileged authority to authenticate itself through a computer network in a 

script requires that such authentication can be accomplished without human intervention, e.g., to 
enter a password. Accordingly, an "install" authority has minimal privileges and preforms the 
□ transfer of the installation data through the "scp" utility. 

20 Within each of servers 104A-C, an installation manager executes. The installation 

manager periodically, e.g., every five (5) minutes, determines whether packed installation data 
exists in the predetermined location to which master server 108 writes such packed installation 
data. Upon detection by the installation manager, the installation manager processes the packed 
installation data in a manner described below in conjunction with logic flow diagram 800 (Figure 

25 8). 

Logic flow diagram 700 (Figure 7) illustrates bundling of either a service or a package for 
installation to the subject server. In the context of logic flow diagram 700, bundling of a package 
is analogous to bundling of a service. Accordingly, a service is described as being bundled in the 
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context of logic flow diagram 700 and that description is equally applicable to installation of a 
package except as otherwise noted. In the following description of logic flow diagram 700, the 
service being bundled is referred to as the subject service. 

In step 702 (Figure 7), master server 108 (Figure 1) retrieves the template of the subject 
5 service, e.g., template 202. In step 704 (Figure 7), master server 108 retrieves server-specific 
information, namely, the IP address and the host name as represented in package/service 
interdependency database 210. In step 706 (Figure 7), master server 108 replaces the placeholder 
data of the retrieved template as described above with the server-specific information to form 
installation data. For example, master server 108 replaces each occurrence of 
1 0 "%% WEB_IP%%" and "%%MUSIC_IP%%" within configuration data files 204 and installation 
^ scripts 206 with the IP address of the appropriate type of the subject server as retrieved from 
S package/service interdependency database 210. Similarly, master server 108 replaces each 
J occurrence of "%%MACHINE_NAME%%" within configuration data files 204 and installation 
i scripts 206 with the host name of the subject server as retrieved from package/service 
H interdependency database 210. As a result of step 706 (Figure 7), master server 108 has 
5 " produced all data necessary for installation of the subject service on the subject server. Such 
^ installation data includes configuration data files specifically configured for the subject server, 

Ty program modules — e.g., program modules 208 — which define the behavior of the subject 

UJ 

p service, and installation scripts which are specifically configured to install the configuration data 

**> 

20 files and program modules to execute properly within the subject server. 

Master server 108 packs the installation data in step 708 (Figure 7). Such packing 
includes forming an archive of the installation data, e.g., using the known "tar" archive utility, 
and compressing the archive to minimize the requisite network bandwidth in transporting the 
archive from master server 108 through computer network 1 10 to the subject one of servers 

25 104A-C. In this illustrative embodiment, compression is accomplished by the known "gzip" 

compression utility. In an alternative embodiment, compression is accomplished by the known 
"compress" compression utility available with many commercial distributions of the UNIX 
operating system. 
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In step 710 (Figure 7), master server 108 adds the packed installation data to the bundle 
for subsequent transport through computer network 1 10 to the subject one of servers 104A-C. 

After step 710 (Figure 7), processing by master server 108 (Figure 1) in installing the 
service or package completes. As described above, after transport of the bundled installation 
data to the subject server and upon detection by the installation manager of the subject server, the 
installation manager processes the packed installation data in a manner illustrated by logic flow 
diagram 800 (Figure 8). 

In step 802, the installation manager of the subject server unpacks the packed installation 
data. In this illustrative embodiment, the installation manager first decompresses the installation 
data using the known "gzip" compression utility and then extracts the individual data files of the 
installation data using the known "tar" archiving utility. As described above, the known 
"compress" compression utility is used in an alternative embodiment to decompress the 
installation data. The extracted data files include configuration data files, installation scripts, 
and/or program modules which are specifically tailored to the subject server in manner described 
above. 

In step 804, the installation manager of the subject server executes the installation scripts. 
All logic required to effect installation of the subject service or package is embodied in the 
installation scripts included with the program modules and configuration data files. Accordingly, 
any changes in the manner in which services and packages are installed are controlled through 
the master server. As a result, virtually no direct maintenance of servers 104A-C are required. 
Instead, virtually all maintenance of software installed on servers 104A-C is automated through 
master server 108. Execution of the installation scripts by the installation manager of the subject 
server typically includes copying of the configuration data files and program modules to 
appropriate locations within storage of the subject server. Such locations are described below 
and are configured to allow multiple versions of each service and package to coexist within the 
subject server. Examples of other tasks that can be performed by the installation scripts include 
for example (i) creating a directory for storage of log files, (ii) creating a username under which 
the service or package is to execute, (iii) storing symbolic links to the service or package in a 
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location within the subject server such that the operating system of the subject server is aware of 
the existence and location of the service or package and can automatically initiate execution of 
the service or package, and (iv) initiating execution of other installation scripts which perform 
such tasks as those described above. 
5 After step 804 (Figure 8), installation of the subject service and packages on which the 

service depends is complete and the service and packages are available to clients of the subject 
server. In step 806, the installation manager of the subject server deletes any remnants of the 
installation data from the predetermined location at which the packed installation data was 
received. After step 806, processing according to logic flow diagram 800 completes. 

10 

Integration with Source Code Control 
y3 In the embodiments described above, the services and packages — in particular the 

executable computer instructions such as program modules 208 (Figure 2) — are stored and 
JL? moved through computer network 1 1 0 as object code. Object code is the object of a process 
hS known as compilation. Compiling of computer code is the translation of the computer code from 

4= 

_ a form intelligible to human software engineers, i.e., source code, to a form more near the form 

^ of instructions executed in the particular type of processor for which the computer code is 

fU intended. 

a : 

q To form program modules 208, source code is written by software engineers and 

26 compiled into object code which is then stored with templatized configuration data files 204 and 
templatized installation scripts 206 to form template 202. Further in accordance with the present 
invention, the process of making template 202 can be further streamlined such that even less 
human interaction is needed to bring new versions of packages and services into use in any of 
servers 104A-C. Such streamlining is provided by combining a source code control system 212 
25 (Figure 2), such as the known Concurrent Versions System (CVS), with the automated 
installation system described above. 

In particular, step 502 (Figure 5) of logic flow diagram 500 is modified to look to source 
code control system 212 (Figure 2) rather than template 202 for program modules 208. Step 602 
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is modified in a directly analogous manner such that the follow description of modification to 
step 502 is equally applicable to step 602. 

Step 502 is shown in greater detail as logic flow diagram 502 (Figure 10). In step 1002, 
master server 108 (Figure 1) queries source code control system 212 (Figure 2) to determine 
whether the subject service is maintained within source code control system 212. Master server 
108 (Figure 1) makes such a determination by requesting a read-only copy of the subject service 
and determining whether source code control system 212 returns an error message indicating no 
such source code is maintained within source code control system 212. In test step 1004 (Figure 
10), master server 108 determines from the response of source code control system 212 (Figure 
2) whether source code control system 212 maintains the subject service. 

If source code control system 212 does not maintain the subject service, master server 
108 — in step 1006 — retrieves program modules 208 from template 202 and processing 
according to logic flow diagram 502, and therefore step 502 (Figure 5), completes. 

Conversely, if source code control system 212 (Figure 2) maintains the subject services, 
processing transfers from test step 1004 (Figure 10) to step 1008. In step 1008, master server 
108 (Figure 1) extracts a copy of the source code for the subject service into a temporary 
location. In step 1010 (Figure 10), master server 108 (Figure 1) compiles the source code to 
form program modules 208 (Figure 2). In this illustrative embodiment, master server 108 (Figure 
1) uses the known "make" command to compile the extracted source code. After step 1010, 
processing according to logic flow diagram 502, and therefore step 502 (Figure 5), completes. 
Program modules 208 (Figure 2) are then bundled and transported to the subject server in the 
manner described above. 

In an alternative embodiment, the retrieved source code itself is bundled and transported 
to the subject server in the manner described above and the installation script executed by the 
subject server compiles the source code within the subject server. Whether the source code is 
compile within the subject server or within master server 108, any retrieved copies of the source 
code and any other intermediate data files of the compilation are deleted and the resulting object 
code is stored in the appropriate directory as described more completely below and as specified 
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in the installation script. 

Thus, according to logic flow diagram 502 (Figure 5), all the advantages of elaborate 
source code control systems such as CVS are added to the automated service/package installation 
system described herein. By merely associating a service or package with a particular one of 
5 servers 104A-C in the manner described above, the latest source code is automatically compiled 
and sent to the server with minimal involvement of a human network manager. 



Service and Package Organization in a Server 

As described briefly above, multiple versions of a service or package can coexist within a 
10 server, e.g., server 104A. Directory structure 900 (Figure 9) illustrates the organization of data 

files within server 104 A to allow multiple versions of a package or service to exist concurrently 
J3 within server 104 A. 

^ An "opt" directory 902 contains directories for all services and packages installed in 

1: server 104A. Directories 904 and 906 each contain a respective installed service. A "packages" 
t§ directory 908 contains all installed packages of server 104 A, and directories 910 and 912 each 
3 " contain a respective installed package. In this illustrative example, directory 910 contains the 
g installed package implementing the known "apache" World Wide Web server, and directory 912 
fU contains the package implementing the known "perl" scripting language. 
q For illustration purposes, consider the example in which the service of directory 904 

1€ requires a specific version of apache, e.g., version 1.3.12, and the service of directory 906 
requires a different version of apache, e.g., version 2.0. All data files which are version- 
independent are stored in directory 910. Version-independent data files of directory 910 can be, 
for example, data files specifying Multi-purpose Internet Mail Extension (MIME) types and 
corresponding filename extensions specifying a particular data file type served by apache. 
25 Version-independent data files can also be stored in a subdirectory of directory 9 1 0 which is 

designated for storage of version-independent data files. Version-specific data files are stored in 
appropriate version-specific directories. For examples, data files which are specific to version 
1.3.12 of apache are stored in directory 914 and subdirectories thereof (e.g., directories 918-922), 
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and data files which are specific to version 2.0 of apache are stored in directory 916 and 
subdirectories thereof (i.e., directories 924-928). The first service, i.e., the service of directory 
904, is configured to use the version of apache stored in directory 914 which in turn is configured 
to look to directory 910 for some of the configuration data, namely, version-independent 
5 configuration data. The second service, i.e., the service of directory 906, is configured to use the 
version of apache stored in directory 916 which in turn is configured to look to directory 910 for 
some of the configuration data, namely, version-independent configuration data. 

There are a number of ways in which a service can be configured to use a specific version 
of a package. The following examples are illustrative. 
10 In one example, the package is the known perl scripting language interpreter. In this 

n example, program modules 208 (Figure 2) include perl scripts. A perl script includes, in its first 
J5 line, data identifying the specific perl interpreter which should execute the script. Accordingly, 
]p perl scripts in program modules 208 include placeholder data in the first line, such as 
't: "%%PERL_VROOT%%," which represents the version-dependent directory in which such an 
H interpreter is installed. Accordingly, when deployed, the scripts are modified such that the 

placeholder data is replaced with data specifying the version-dependent directory for the specific 
version of perl as described above with respect to step 706 (Figure 7). As a result, executing of 
fy any such scripts involves interpretation in accordance with the specific version of perl indicated 
□ in the perl scripts of program modules 208 (Figure 2). Such scripts which define part of a service 
2Q are therefore configured to use a particular version of a package, e.g., perl. 

In another example, the package is the known apache web server package. In this 
example, the apache web server package is set to execute continuously and to monitor requests 
for the particular service using the apache web server package, i.e., the subject service in this 
context. The apache web server package can determine whether a request is for the particular 
25 service according to the URL (universal resource locator) of the request. In this example, 
installation of the subject service configures the particular version of the package, e.g., the 
apache web server package, to refer requests to the service. 

Installation of the subject service executes an "install-for-service" script for the 



Oj 



— 29 — 




Patent Application Attorney Docket P-2138D1 

appropriate version of the apache web server package. The "install-for-service" script is part of 
the installation of the package and creates symbolic links which cause the package to be started 
upon booting of the server on which the package and subject service are installed. The symbolic 
links also configure the package to interact with the subject service, e.g., by forwarding requests 
5 intercepted by the apache web server package to the subject service. Such symbolic links can 
refer to scripts, execution of which cause the apache web server to execute and to monitor 
requests for specific URLs. Thus, when the server is booted, the specific version of the apache 
web server package is started and is configured to handle requests of the subject service and to 
forward such requests to the subject service. In this way, the subject service is configured to use 
1 0 a specific version of the package. 

m A number of advantages are realized by allowing multiple versions of a package to 

y9 execute concurrently on the subject server. One advantage is the assurance of continued 
jr operation of previously installed services. Consider the example of Figure 9. The first service 
jfj (of directory 904) depends upon version 1 .3 . 1 2 of apache while the second service (of directory 
¥5 906) depends upon version 2.0 of apache. If installation of the second service included replacing 
J version 1.3.12 of apache with version 2.0, the first service would then interact with version 2.0 of 

apache and may fail to execute properly due to differences between the respective versions of 
FU apache. Accordingly, installation of the second service and the newer version of apache does not 

s - 3 

p affect the performance of the first, previously installed service. 

26 Another advantage is improved fault resistance of the subject server. Suppose, for 

example, that execution of the second service together with version 2.0 of apache results in an 
invalid state which causes failure of apache version 2.0. Since version 1 .3. 12 of apache executes 
independently within the subject server, apache version 1.3.12, the second service, and other 
services which depend upon apache version 1.3.12 can continue to execute successfully without 

25 interruption. 

This latter advantage can also be realized for services that use the same version of a 
package. Since the "install-for-service" script is executed — for some packages such as the 
apache web server package — for each service using that package. The result is that a separate 
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process for such a package executes for each service for which the package is installed. 
Accordingly, a failure in one process of the package does not interrupt execution of other 
processes of the same version of the same package, and services depending on those other 
package processes continue to function properly. Thus, fault resistance is significantly improved. 



The above description is illustrative only and is not limiting. For example, while a single 
master server 108 (Figure 1) is shown, it is appreciated that the acts performed by master server 
108 as described herein can be performed by a number of computer systems working 
1 0 cooperatively. It is preferred that such computer systems are sufficiently closely coupled and 

coordinated, e.g., through a local area network or as a distributed computer system, to provide a 
S comprehensive and integral package/service interdependency database 210. In addition, 
^ computer network 1 10 is the Internet in this illustrative example. However, computer network 
q 110 can be a different network such as a local area network or a different wide area network. 
The present invention is limited only by the claims which follow. 
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